ZCode is an artificial intelligence programming tool developed by the Chinese company Z.ai (Zhipu AI). Released in July 2026 and positioned by its developer as the official development environment for its GLM-5.2 large language model, it is described as an "agentic development environment" in which an AI agent plans, edits and reviews code to complete long-horizon tasks. The tool surpassed one million users in August 2026. In September 2026 it became the subject of a data-privacy controversy after developers found that it uploaded local project data, including full Git histories, to cloud storage without consent.
History ZCode was released in early July 2026; a report by VentureBeat on 2 July described it as a desktop coding agent competing with Cursor, Claude Code, GitHub Copilot and Google Antigravity, with Z.ai presenting it as the official development environment for GLM-5.2. The tool is free to download, with paid subscriptions ranging from a Lite plan at US$16.20 per month to a Max plan at US$144 per month.
On 11 August 2026, Z.ai announced a major update adding goal-directed tasks, subagents, remote control and idle-time task execution, and said that ZCode had surpassed one million users. The company's internal benchmark, Z.ai Code Bench, indicated that GLM-5.2 paired with ZCode achieved a task pass rate 2.39 percentage points higher than the same model paired with Claude Code, with the advantage concentrated in complex tasks spanning multiple files and stages.
Features ZCode differs from conventional IDE-based assistants that add a chat sidebar and code completion: the user states a goal, and the agent handles planning, file editing, review and iterative correction. According to the developer's documentation, it is a "full-featured agentic development environment" designed for long-horizon tasks, combining a self-developed agent with multi-framework compatibility, bot integration and remote control from mobile devices. Running agents can also be controlled through messaging services such as WeChat, Lark and Telegram, and the tool can connect to third-party model providers.
Privacy controversy User reports On 18 September 2026, several users reported that ZCode had "silently uploaded" development data to third-party cloud servers without permission, including the entire history of their development work, which could contain keys and internal business information. Users said the upload could not be disabled in the client and that the uploaded data, while encrypted, could not be unpacked locally.
According to The Next Web, the developer who first documented the behaviour, writing under the name "ferstar", found a 313-megabyte encrypted snapshot of a commercial project in a local ZCode checkpoints directory, whose status log recorded 564 failed upload attempts. The snapshot contained 42,411 files, of which 86.6% were Git directories, including 196.1 MB of large-file cache and 102.2 MB of Git objects carrying the full commit history. File contents were encrypted with AES-256-CTR and the key wrapped with RSA-OAEP-SHA256 using a public key from Z.ai's server; two client settings that appeared to block uploads in fact only governed downstream handling of the data.
Company response and remediation Z.ai responded on the evening of 18 September that the issue originated in a ZCode feature called "code repository indexing", which had been enabled by default, and said that uploaded data was used only to generate Repo Wiki pages in the cloud and was then destroyed. The company apologized to affected users, pledged to release ZCode's source code, invited third-party review, and offered all users an additional weekly quota reset as compensation.
On the evening of 20 September, the company's MaaS platform introduced a "no data retention" option under which inputs and outputs of model calls are not statically stored, with exceptions for APIs requiring persistent storage and for legal or abuse-investigation requirements. On 21 September, Z.ai announced that ZCode had completed a security rectification and that its client, backend and agent CLI code had been published on GitHub under the Apache-2.0 license. According to the company, the China Academy of Information and Communications Technology verified that the product's Alibaba Cloud object-storage bucket contained no data, and the security firm NSFOCUS reported that the bucket and all objects in it had been deleted and that version 3.14.0 of the client contained no code path capable of triggering local repository snapshots or file uploads.
On 24 September, The Next Web reported, citing Reuters, that a Chinese company, Chengming Technology, had alleged that six of its coding workspaces were uploaded without consent, and that it withdrew the statement days later, saying it had relied on wrong evidence.
Open sourcing and transparency The Next Web observed that the published repository had been created on the day of the open-sourcing announcement and initially carried only two commits, so the tool's development history, including the code that had performed the uploads, was not included; the publication wrote that the tool could now be inspected, "what it used to do" could not. The repository's issue tracker was disabled. Shares of Z.ai, listed in Hong Kong, closed nearly 2% higher on 21 September after opening lower. Analysts at CSC Financial said the open-sourcing turned previously unverifiable security promises into verifiable ones, allowing developers to check data calls, network requests and local processing logic directly.
See also Claude Code Cursor (code editor) GitHub Copilot
References